quietmoneyIsmalicious
A threat intelligence service for security teams and developers: free web lookups for IPs, domains, URLs, hashes, and wallet addresses, plus a REST API, STIX/TAXII feeds, OpenCTI, and MCP tools that SIEM and other security products can plug into.
French indie deOne-line growth story, compiled by us from public sources; speculation is marked separately below.
Revenue over time
Real payments synced by TrustMRR, in USD, by calendar month, renewals included.
- MRR
- $1,907
- Revenue, last 30 days
- $1,729
- All-time revenue
- $15,448
- Active subscriptions
- 16
- Payments via
- Stripe
- Source
- TrustMRR, synced from the founder's payment account
1. Productwhat it sells, to whom, and how it charges
- Product
- A threat intelligence service for security teams and developers: free web lookups for IPs, domains, URLs, hashes, and wallet addresses, plus a REST API, STIX/TAXII feeds, OpenCTI, and MCP tools that SIEM and other security products can plug into.
- Users
- SOC security operations teams, managed security service providers (MSSPs), and developers who want to wire threat intelligence into their own security products or AI Agent workflows
- Positioning
- A lightweight threat intelligence source built by one person: 12 free lookup tools on the website with no signup, and the same data offered through an API / STIX-TAXII / MCP for integration; the Pro tier at €99/month is cheaper than enterprise intelligence platforms.
- Pricing
- Free €0 (250 API requests per month); Pro €99/month; Enterprise contact sales Billing: subscription Free tier: yes Source: Homepage
- Prices on site
- €0 free forever (250 API requests/mo); €99/mo Pro; Enterprise contact us
“No referral, share, embed or leaderboard visible; only a GitHub icon in the footer, no open-source claim.”Quote from the site
2. Channelswhere new users come from and what the traffic looks like
New-user source: SEO (Non-brand search). Similarweb 2026-09: the top channel is direct at 41.4%, followed by organic search at about 44% (estimated from rank) and referrals at about 9%; the channels the founder filled in on TrustMRR are blog, newsletter, SEO, LinkedIn, and X. The website blog has 260 articles in total, with almost one technical article a day (DNS, STIX, TAXII, DMARC, and more) from 2026-09-30 to 10-23. Many of the search terms Similarweb captured are unrelated adult sites and piracy site names, which suggests a lot of the search traffic is long-tail "is this site malicious" lookups; the share that converts to paid is unknown. Existing users are retained mainly through API integrations.
Last month's traffic sources
Top channel measured by Similarweb, others estimated by rank
Five-class attribution
| Attributable new users, last month | Share |
|---|---|
| SEO | 44% |
| Other | 56% |
Direct + brand search 41%. Direct and brand search count as viral only when the site shows sharing mechanics; the largest share wins, under 5% means Other.
Countries
| Country | Share of visits |
|---|---|
| United States | 12.89% |
| Spain | 6.48% |
| India | 5.23% |
| United Kingdom | 4.62% |
| Brazil | 4.55% |
Language
English
Keywords
443 keywords · brand ~41% · organic 100% / paid 0%
| Similarweb top 5 keywords |
|---|
| sex |
| xhamster |
| hdhub4u.joburg |
| terknl |
| porntn |
Non-brand queries: sex, xhamster, hdhub4u.joburg, terknl, porntn
Site metrics (Similarweb, last month)
- Visits, last 3 months
- 67K
- Visits MoM
- +22.42%
- Country rank
- Vietnam #26894
- Bounce rate
- 41.3%
- Pages / visit
- 1.65
- Visit duration
- 00:00:21
- Top 3 channels
- Direct › Organic Search › Referrals (top channel 41.4%)
3. Growth pathhow the first users arrived and what kept it growing
Classification
Basics
Timeline
Growth loop
Revenue and scale clues
Confidence and gaps
Other sites that started via “Long-tail search”
Similar sitessame category, also growing via SEO
FAQ
How much revenue does Ismalicious make per month?
About $1,801 last month (real payments synced by TrustMRR), #430 of 563 TrustMRR sites; the month before was $2,308.
Where do Ismalicious's new users come from?
New-user source: SEO (Non-brand search). New users mostly come from need-based searches Similarweb 2026-09: the top channel is direct at 41.4%, followed by organic search at about 44% (estimated from rank) and referrals at about 9%; the channels the founder filled in on TrustMRR are blog, newsletter, SEO, LinkedIn, and X. The website blog has 260 articles in total, with almost one technical article a day (DNS, STIX, TAXII, DMARC, and more) from 2026-09-30 to 10-23. Many of the search terms Similarweb captured are unrelated adult sites and piracy site names, which suggests a lot of the search traffic is long-tail "is this site malicious" lookups; the share that converts to paid is unknown. Existing users are retained mainly through API integrations.
How much does Ismalicious cost?
Free €0 (250 API requests per month); Pro €99/month; Enterprise contact sales
Dossier confidence: medium. Parts 1 and 2 come from reading the site and Similarweb data; part 3 from public reporting, founder posts, Wayback snapshots, WHOIS and similar, with speculation marked.
The numbers: revenue comes from TrustMRR: real payments synced automatically from the founder's Stripe or other payment account, summed by calendar month, renewals included, in USD. Site visits come from the Similarweb public page; where it shows none, they are estimated from global rank or the TrustMRR payment count, as noted on the page.
Data through last month. Page updated 2026-10-31.